Detection Engineer
Core
Own the end-to-end strategy and operational assurance of threat-relevant telemetry and adversary coverage to strengthen detection effectiveness across Vodafone's CSOC.
Role type
Senior Detection Engineer (Telemetry Strategy & Coverage)
Builds
Scalable, adversary-aligned detection capabilities and visibility into coverage gaps
Domain
Cybersecurity / Threat Intelligence / SOC Operations
Required skills
MITRE ATT&CK mastery, threat modeling, telemetry strategy, log source prioritization, data quality governance, adversary emulation design, scripting (Python/PowerShell), KQL/SPL/Sigma/YARA, cloud security architecture
Preferred skills
OSCP/OSEP/GXPN/GPEN certifications, Microsoft SC-200, Google Cloud Security, MITRE ATT&CK Defender badges, CTI lifecycle training, AI/ML in SOC, GCTI/GCDA/GCED/GCIA
Technologies
Microsoft Defender, Sentinel, Splunk, QRadar SOAR, ATT&CK Navigator, Python, PowerShell
Responsibilities
Define telemetry requirements aligned to MITRE ATT&CK and threat models; govern acceptance criteria for CSOC telemetry; maintain ATT&CK-aligned coverage views; produce assurance artefacts (dashboards, runbooks); act as authority for visibility and telemetry-related risk; partner with platform teams to balance ingestion performance and cost.
Seniority
Senior, hands-on IC with strategic ownership